CLAIM AMENDMENTS 

Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 1-39. 

• After this Amendment: Claims 1-39 
Non-Elected, Canceled, or Withdrawn claims: None 
Amended claims: 1, 20, 25 and 39 

New claims: None 



Claims: 

1. (Currently Amended) A method for investigating messages 
passed in a message-passing environment, comprising: 

collecting a plurality of messages from at least one participant in the 
message-passing environment, wherein each message has a first piece 
describing transfer information and a second piece describing an 
o peration being performed in the message : 

assembling the messages into at least one message sequence; 

analyzing said at least one message sequence from the message- 
passing environment to extract information regarding [ the message 
passing environment ] at least the one participant in the message- 
passing environment : and 

outputting the information. 
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2. (Original) The method according to claim 1, wherein the message- 
passing environment is a network environment including plural participants 
coupled together via a network. 

3. (Original) The method according to claim 2, wherein the network 
uses an Internet Protocol to transmit messages between participants. 

4. (Original) The method according to claim 2, wherein the 
messages express the information in one of a plurality of message formats. 

5. (Original) The method according to claim 2, wherein the 
messages include information expressed in a markup language. 

6. (Original) The method according to claim 5, wherein the markup 
language is the extensible markup language (XML). 

7. (Original) The method according to claim 2, wherein the network 
uses Simple Object Access Protocol (SOAP) to transmit messages between 
participants. 

8. (Original) The method according to claim 1, wherein the message- 
passing environment is a machine or system including plural interacting 
components that function as message participants. 
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9. (Original) The method according to claim 1, wherein the message- 
passing environment is a software program including plural interacting software 
modules that function as message participants. 

10. (Original) The method according to claim 1, further comprising, 
after the collecting, converting identifying information pertaining to said at least 
one participant into an indication of a role played by the participant in the 
message-passing environment. 

11. (Original) The method according to claim 1, wherein the 
assembling comprises combining multiple message traces into said at least one 
message sequence, each message trace pertaining to one or more messages 
transmitted by and/or received at a participant. 

12. (Original) The method according to claim 1, wherein the 
assembling comprises assembling plural message sequences, and the analyzing 
comprises analyzing the plural message sequences. 

13. (Original) The method according to claim 1, wherein the analyzing 
involves performing cluster analysis to group said at least one message sequence 
into at least one cluster. 
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14. (Original) The method according to claim 13, wherein the cluster 
analysis comprises: 

forming a data matrix based on information in said at least one message 
sequence; and 

forming said at least one cluster based on the data matrix. 

15. (Original) The method according to claim 14, wherein the forming 
of the data matrix involves extracting features from said at least one message 
sequence. 

16. (Original) The method according to claim 14, wherein the forming 
of the data matrix involves forming a similarity measure which measures the 
difference between said at (east one message sequence and another message 
sequence. 

17. (Original) The method according to claim 13, wherein the 
analyzing involves identifying results of the cluster analysis that may warrant 
further investigation. 

18. (Original) The method according to claim 1, wherein the analyzing 
comprises comparing said at least one message sequence with a reference 
message sequence. 
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19. (Original) A computer readable medium including machine 
readable instructions for implementing the collecting, assembling, analyzing, and 
outputting recited in claim 1. 

20. (Currently Amended) An apparatus for investigating messages 
passed in a message-passing environment, comprising: 

message aggregation logic configured to collect a plurality of messages 
from at least one participant in the message-passing environment, and to 
assemble the messages into at least one message sequence, wherein each 
message has a first piece describing transfer information and a second 
piece describing an operation being performed in the message ; 

analysis logic configured to analyze said at least one message sequence 
from the message passing environment to extract information regarding 
[ the message-passing environment ] at least the one participant in the 
message-passing environment ; and 

output logic configured to output the information. 

21. (Original) The apparatus according to claim 20, wherein the 
message-passing environment is a network environment including plural 
participants coupled together via a network. 

22. (Original) The apparatus according to claim 21, wherein the 
network uses an Internet Protocol to transmit messages between participants. 

Serial No.: 10/692,265 
Atty Docket No.: MS1-1714US 
Atty/Agent: Jason F. Lindh 
Response to Non-Final Office Action 



lee@hayes The Business of IP™ 

ww.leehiiyes.cont 50&324.925S 



23. (Original) The apparatus according to claim 21, wherein the 
messages express the information in one of a plurality of message formats. 

24. (Original) The apparatus according to claim 21, wherein the 
messages include information expressed in a markup language. 

25. (Currently Amended) The method according to claim [25] 24, 
wherein the markup language is the extensible markup language (XML). 

26. (Original) The apparatus according to claim 21, wherein the 
network uses Simple Object Access Protocol (SOAP) to transmit messages 
between participants. 

27. (Original) The apparatus according to claim 20, wherein the 
message-passing environment is a machine or system including plural interacting 
components that function as message participants. 

28. (Original) The apparatus according to claim 20, wherein the 
message-passing environment is a software program including plural interacting 
software modules that function as message participants. 

29. (Original) The apparatus according to claim 20, wherein the 
message aggregation logic is further configured to convert identifying 

Serial No.: 10/692,265 
Atty Docket No.: MS1-1714US 
Atty/Agent: Jason F. Lindh 
Response to Non-Final Office Action 



jS^hayeS The Business of IP m 



information pertaining to said at least one participant into an indication of a role 
played by the participant in the message-passing environment. 

30. (Original) The apparatus according to claim 20, wherein the 
message aggregation logic is further configured to combine multiple message 
traces into said at least one message sequence, each message trace pertaining 
to one or more messages transmitted by and/or received at a participant. 

31. (Original) The apparatus according to claim 20, wherein the 
message aggregation logic is further configured to assemble plural message 
sequences, and the analysis logic is further configured to analyze the plural 
message sequences. 

32. (Original) The apparatus according to claim 20, wherein the 
analysis logic is configured to perform cluster analysis to group said at least one 
message sequence into at least one cluster. 

33. (Original) The apparatus according to claim 32, wherein, in 
performing the cluster analysis, the analysis logic is further configured to: 

form a data matrix based on information in said at least one message 
sequence; and 

form said at least one cluster based on the data matrix. 
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34. (Original) The apparatus according to claim 33, wherein the 
analysis logic is configured to form the data matrix by extracting features from 
said at least one message sequence. 

35. (Original) The apparatus according to claim 33, wherein the 
analysis logic is configured to form the data matrix by forming a similarity 
measure which measures the difference between said at least one message 
sequence and another message sequence. 

36. (Original) The apparatus according to claim 32, wherein the 
analysis logic is further configured to identify results of the cluster analysis that 
may warrant further investigation. 

37. (Original) The apparatus according to claim 20, wherein the 
analysis logic is further configured to compare said at least one message 
sequence with a reference message sequence. 

38. (Original) A computer readable medium including machine 
readable instructions for implementing the message aggregation logic, the 
analysis logic, and the output logic of claim 20. 

39. (Currently Amended) An apparatus for investigating messages 
passed in a message-passing environment, comprising: 
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means for collecting a plurality of messages from at least one participant 
in the message-passing environment, wherein each message has a first 
piece describing transfer information and a second piece describing an 
operation being performed in the message : 

means for assembling the messages into at least one message sequence; 

means for analyzing said at least one message sequence from the 
message-passing environment to extract information regarding [the 
mes s age - pas s ing environment ] at least the one participant in the 
message-passing environment ; and 

means for outputting the information. 
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